Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207458.roa
File:                     AS207458.roa (raw, json)
Hash identifier:          pwP7IPHJPFlMWOvotHshRQJgRsgf2Ghv9vahZ6DoGjA=
Subject key identifier:   4E:47:81:5B:AC:DD:C1:01:D0:8D:F0:18:47:B3:DD:0A:B1:E7:98:65
Certificate issuer:       /CN=79cc621cd2109938184a2a64ad1f65896e488b7c
Certificate serial:       5FFD546C9E293073C5F7A92486653809067540FF
Authority key identifier: 79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207458.roa
Signing time:             Thu 20 Oct 2022 23:35:01 +0000
ROA not before:           Thu 20 Oct 2022 23:30:01 +0000
ROA not after:            Thu 19 Oct 2023 23:35:01 +0000
asID:                     207458
IP address blocks:        181.215.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:fd:54:6c:9e:29:30:73:c5:f7:a9:24:86:65:38:09:06:75:40:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79cc621cd2109938184a2a64ad1f65896e488b7c
        Validity
            Not Before: Oct 20 23:30:01 2022 GMT
            Not After : Oct 19 23:35:01 2023 GMT
        Subject: CN=4E47815BACDDC101D08DF01847B3DD0AB1E79865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:bf:a1:d1:61:2e:7f:56:d7:06:13:af:56:
                    29:e1:69:7d:a0:e0:97:7e:dc:a4:14:46:62:ae:5c:
                    81:5f:46:af:01:3a:96:28:86:97:63:a5:b2:08:cd:
                    94:6f:7a:b9:39:93:3a:60:2c:86:ad:29:6b:d4:f7:
                    19:44:b6:30:1b:78:5c:ef:54:27:7d:69:4a:70:ac:
                    69:fb:9f:00:15:77:81:5f:b5:36:f0:65:5a:2b:5f:
                    78:e0:ce:31:39:36:fd:ad:66:12:ed:3c:f2:8c:75:
                    ff:eb:a1:51:be:04:b8:f2:a1:d1:1e:bd:da:ea:94:
                    2d:70:fb:f3:a8:5d:93:8b:cf:15:89:b6:54:35:f9:
                    ea:2b:d6:12:d5:b9:8f:33:af:a5:95:06:47:43:cc:
                    6c:10:73:a3:8f:45:1c:b3:ec:f0:82:f5:a4:0b:66:
                    dc:20:1c:e5:dd:03:ce:c2:a1:eb:83:63:f7:b5:96:
                    a4:20:c7:66:41:27:8f:1f:80:a5:0d:5c:f4:51:56:
                    e9:ed:b2:c2:2a:6f:13:d8:00:d6:1e:44:f7:ab:6a:
                    18:b1:d3:9c:1d:3d:da:cc:4b:13:56:b1:52:fa:53:
                    14:5d:7d:bb:14:ba:f4:f1:1e:ed:92:dc:de:4e:09:
                    fb:b0:08:9e:46:34:12:1f:da:60:be:fd:25:ba:34:
                    91:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:81:5B:AC:DD:C1:01:D0:8D:F0:18:47:B3:DD:0A:B1:E7:98:65
            X509v3 Authority Key Identifier:
                keyid:79:CC:62:1C:D2:10:99:38:18:4A:2A:64:AD:1F:65:89:6E:48:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/79CC621CD2109938184A2A64AD1F65896E488B7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ecxiHNIQmTgYSipkrR9liW5Ii3w.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/db433656-6b13-48e1-9ca5-648946810f3e-0/0/AS207458.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.215.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:9f:d4:e6:02:32:34:f1:13:b6:e3:3d:95:52:25:ff:fa:13:
         4c:b7:e2:4d:72:0a:75:57:54:02:4c:96:71:7a:54:ca:14:cd:
         22:1f:ff:ff:5c:18:a0:86:50:b6:86:af:bc:51:bc:e2:a7:a4:
         6b:92:c5:f2:ac:dc:aa:bd:13:fc:26:e3:a4:57:7c:3e:1d:63:
         3d:7e:1f:41:c0:04:8e:0a:fa:4e:11:41:6b:db:d8:71:e6:ba:
         4f:fc:48:e4:c2:34:ac:75:dd:70:4c:04:8c:e7:f6:4b:c4:f8:
         5a:06:a9:e5:0e:d7:4e:bb:5e:83:79:57:68:db:2d:cc:23:a2:
         71:a8:a1:32:bb:22:ac:3e:7e:9c:9b:49:5a:10:71:b8:6e:1d:
         b4:11:67:fa:8d:c3:20:d4:ec:b3:11:a2:54:67:98:f3:88:e8:
         e7:9b:55:32:38:39:2c:cf:c4:d0:9a:34:ed:3c:97:08:59:c1:
         d0:1d:bc:2a:cb:e8:07:29:b5:57:c4:bc:76:85:c6:ae:d2:e0:
         e9:56:10:f2:7d:be:5a:ae:f4:84:03:82:b9:84:13:82:c8:65:
         74:03:33:73:71:66:25:d4:7a:73:06:24:d0:b3:5f:63:1d:8c:
         76:38:f3:77:49:20:de:b8:5d:d2:3c:9b:60:16:5e:5a:92:1e:
         5e:f0:a3:7b
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUX/1UbJ4pMHPF96kkhmU4CQZ1QP8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzljYzYyMWNkMjEwOTkzODE4NGEyYTY0YWQxZjY1ODk2
ZTQ4OGI3YzAeFw0yMjEwMjAyMzMwMDFaFw0yMzEwMTkyMzM1MDFaMDMxMTAvBgNV
BAMTKDRFNDc4MTVCQUNEREMxMDFEMDhERjAxODQ3QjNERDBBQjFFNzk4NjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDInL+h0WEuf1bXBhOvVinhaX2g
4Jd+3KQURmKuXIFfRq8BOpYohpdjpbIIzZRverk5kzpgLIatKWvU9xlEtjAbeFzv
VCd9aUpwrGn7nwAVd4FftTbwZVorX3jgzjE5Nv2tZhLtPPKMdf/roVG+BLjyodEe
vdrqlC1w+/OoXZOLzxWJtlQ1+eor1hLVuY8zr6WVBkdDzGwQc6OPRRyz7PCC9aQL
ZtwgHOXdA87CoeuDY/e1lqQgx2ZBJ48fgKUNXPRRVuntssIqbxPYANYeRPerahix
05wdPdrMSxNWsVL6UxRdfbsUuvTxHu2S3N5OCfuwCJ5GNBIf2mC+/SW6NJFFAgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUTkeBW6zdwQHQjfAYR7PdCrHnmGUwHwYDVR0j
BBgwFoAUecxiHNIQmTgYSipkrR9liW5Ii3wwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
ZGI0MzM2NTYtNmIxMy00OGUxLTljYTUtNjQ4OTQ2ODEwZjNlLTAvMC83OUNDNjIx
Q0QyMTA5OTM4MTg0QTJBNjRBRDFGNjU4OTZFNDg4QjdDLmNybDBkBggrBgEFBQcB
AQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWN4aUhOSVFtVGdZU2lwa3JSOWxpVzVJaTN3LmNlcjByBggr
BgEFBQcBCwRmMGQwYgYIKwYBBQUHMAuGVnJzeW5jOi8vci5tYWdlbGxhbi5pcHhv
LmNvbS9yZXBvL2RiNDMzNjU2LTZiMTMtNDhlMS05Y2E1LTY0ODk0NjgxMGYzZS0w
LzAvQVMyMDc0NTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAC1170wDQYJKoZIhvcNAQELBQADggEBAFWf
1OYCMjTxE7bjPZVSJf/6E0y34k1yCnVXVAJMlnF6VMoUzSIf//9cGKCGULaGr7xR
vOKnpGuSxfKs3Kq9E/wm46RXfD4dYz1+H0HABI4K+k4RQWvb2HHmuk/8SOTCNKx1
3XBMBIzn9kvE+FoGqeUO1067XoN5V2jbLcwjonGooTK7Iqw+fpybSVoQcbhuHbQR
Z/qNwyDU7LMRolRnmPOI6OebVTI4OSzPxNCaNO08lwhZwdAdvCrL6AcptVfEvHaF
xq7S4OlWEPJ9vlqu9IQDgrmEE4LIZXQDM3NxZiXUenMGJNCzX2MdjHY483dJIN64
XdI8m2AWXlqSHl7wo3s=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:41 2023 by rpki-client on console-fra.rpki-client.org